I'm a OC user. I have two web in 1.5 and open a new 2.0, and I don't know sh...t about coding or programming etc..
I fell you guys developing very interesting extention. Personnally, I would never install or get install something that would not be from this site. How about JUST having your module sign and have a list of autorized or pre-enlisting.

Unfortunately those 2 sites still are working and selling our work. I also think that simple order validation api based by orderid and extension id, returning boolean is sufficient and it won't be very difficult to be done.

I just noticed that myopencart.info is using Cloudflare services. Anyone that has an extension that has been stolen should report them, so we can get them banned from Cloudflare. You can find the abuse report form here: